Application Security News and Articles


New SEC Cybersecurity Rules and What It Means for Board Oversight

The SEC adopted new rules surrounding cybersecurity risk management, strategy, governance, and incident disclosure. As a CISO, this no doubt impacts how your company discloses material cybersecurity incidents through a Form 8-K item and annually ...

BSidesTLV 2023 – Elad Ernst – One Device To Rule Them All

Many thanks to BSidesTLV for publishing their presenter’s erudite BSidesTLV 2023 security content on the organizations’ YouTube channel. Permalink The post BSidesTLV 2023 – Elad Ernst – One Device To Rule Them All appeared first ...

CAPTCHA: A Cost-Proof Solution, Not A Turing Test

Understanding the Inherent Limitations of CAPTCHAs At its core, a CAPTCHA (Completely Automated Public Turing Test to Tell Computers and Humans Apart) is designed to be a test that can distinguish between humans and automated bots. CAPTCHAs ...

Randall Munroe’s XKCD ‘Types of Solar Eclipse’

via the comic artistry and dry wit of Randall Munroe, maker of XKCD! Permalink The post Randall Munroe’s XKCD ‘Types of Solar Eclipse’ appeared first on Security Boulevard.

Google Brings AI Magic to Fuzz Testing With Eye-Opening Results

Google sprinkles magic of generative-AI into its open source fuzz testing infrastructure and finds immediate success with code coverage. The post Google Brings AI Magic to Fuzz Testing With Eye-Opening Results appeared first on SecurityWeek.

The Week in Security: Researchers hack ‘unbreakable’ card-shuffling hardware, Discord.io shut after breach

Welcome to the latest edition of The Week in Security, which brings you the newest headlines from both the world and our team across the full stack of security. This week: Researchers kick it Ocean's Eleven style with an attack on card shuffling ...

Adding File Security to Your Email Platform

By John Masserini, Senior Research Analyst, TAG Cyber  Since 2018, the user base of Microsoft Office 365 has steadily grown from 155 million to more than 345 million in 2022. Unlike Google’s Workspace, whose growth was predicated by a free ...

The Zero Trust Clock is Ticking: Are Your SecOps Teams Ready?

The post The Zero Trust Clock is Ticking: Are Your SecOps Teams Ready? appeared first on Low-Code Security Automation & SOAR Platform | Swimlane. The post The Zero Trust Clock is Ticking: Are Your SecOps Teams Ready? appeared first on ...

Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage Expands

A new report from Rapid7 says a ransomware gang like Cl0p would easily be able to afford a bevy of zero-day exploits for vulnerable enterprise software. The post Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage Expands appeared first ...

Scraping AI

How AI-Powered Bots are Redefining Web Scraping Attacks A new era of web scraping has emerged, one that marries technology and ingenuity to redefine the way data is harvested and utilized. Picture this: the world of cybercrime is undergoing a ...

Malicious QR Codes Used in Phishing Attack Targeting US Energy Company

A widespread phishing campaign utilizing malicious QR codes has hit organizations in various industries, including a major energy company in the US. The post Malicious QR Codes Used in Phishing Attack Targeting US Energy Company appeared first on ...

BSidesTLV 2023 – Shaked Klein Orbach & Arik Nachmias – Sealing The Leaks

Many thanks to BSidesTLV for publishing their presenter’s erudite BSidesTLV 2023 security content on the organizations’ YouTube channel. Permalink The post BSidesTLV 2023 – Shaked Klein Orbach & Arik Nachmias – Sealing The ...

Cisco Patches High-Severity Vulnerabilities in Enterprise Applications

Cisco has patched high-severity vulnerabilities in enterprise applications that could lead to privilege escalation, SQL injection, and denial-of-service. The post Cisco Patches High-Severity Vulnerabilities in Enterprise Applications appeared ...

A Deep Dive into CL0P Ransomware

CL0p is a notorious name on the ransomware scene, and with good reason. The gang’s members have been responsible for a series of high-profile attacks since security researchers first spotted their ransomware strain in the wild back in 2019. Our ...

CISA Unveils Plan to Slow the Hacker Abuse of RMM Tools

The nation’s top cybersecurity agency is rolling out a plan to address the security of remote monitoring and management (RMM) tools that are used by legitimate companies to improve the performance of IT systems but can pose a multiplying ...

Taking the Danger Out of Enterprise Data

If data is the lifeblood of every organization, it also represents potentially critical business risk. To manage that risk effectively, organizations must apply strong protection to all their enterprise data. But first they have to find it all, ...

Cybersecurity in the Digital Learning Environment

Discover the critical role of cybersecurity in safeguarding digital learning environments. Stay informed to ensure student and user safety. The post Cybersecurity in the Digital Learning Environment appeared first on Security Boulevard.

Risk-Based Authentication in the Modern Digital Landscape

In today’s digital environments, there are no shortage of security measures being used to protect sensitive data. Zero-trust and multifactor authentication (MFA) are common strategies companies have taken to stay ahead of bad actors. ...

MixMode Highlighted in Gartner’s 2023 Hype Cycle for Network Detection and Response

MixMode, a leading provider of network detection and response (NDR) solutions, has been highlighted as a key vendor in Gartner's 2023 Hype Cycle for Network Detection and Response. This is a significant achievement for MixMode, as it recognizes ...

Service Provider Network Protection Automation – 6 Best Practices

As the frequency and sophistication of distributed denial-of-service (DDoS) attacks continue to rise, service providers face the challenge of safeguarding their networks against these disruptive threats. Traditional manual approaches to DDoS ...